Risk and Compliance Team Lead

BIS Safety Software•Sherwood Park, AB

1d•CA$100,000 - CA$120,000•Hybrid

About The Position

BIS Safety Software is a SaaS company focused on safety, learning, and compliance management. They are seeking a Risk and Compliance Team Lead to strengthen their risk management, data protection, and regulatory compliance efforts. This is a hands-on leadership role responsible for building and managing the frameworks and processes that protect the business, clients, and data. The position involves working at the intersection of security, privacy, and operations, collaborating with various teams to identify risks, close gaps, and ensure the software meets client standards. The ideal candidate is detail-oriented, enjoys building new processes, and improving existing ones. The role is based in the Mountain Standard Time (MST) zone. For candidates in the Edmonton area, it's an onsite position in Sherwood Park. Remote work may be considered for exceptional candidates who can collaborate effectively within MST business hours.

Requirements

Experience leading a team or function, with a track record of developing people, setting priorities, and driving accountability.
Proven ability to work effectively across technical and non-technical teams to drive alignment and results.
Comfortable operating as both a strategic leader and hands-on contributor - able to set direction for the function while staying close to the work.
Excel in managing multiple tasks and projects simultaneously.
Demonstrate excellent communication, reporting, and presentation skills.
Possess strong analytical skills to evaluate and improve complex processes.
Strong proficiency in Microsoft 365, with an interest in IT and technology (IT background is an asset).
6+ years of experience in privacy, data security, compliance, and risk management.
Postgraduate education in cybersecurity or a related field.
Strong understanding of Canadian privacy laws and regulations.
Experience in providing training and developing policy documents related to privacy and compliance.
Project management experience

Nice To Haves

PMP certification is a strong asset but not required.
CIPP/C, CIPM, or other relevant privacy/security certifications

Responsibilities

Lead the Risk and Compliance Function: Provide direction, structure, and oversight to ensure effective execution of all compliance and risk initiatives.
Identify, Assess, and Mitigate Risks: Partner with teams to proactively identify, assess, and address operational, IT, and data privacy risks.
Collaborate Cross-Functionally: Work with developers, customer support, and team leads to close gaps and implement effective risk mitigation strategies.
Build and Improve Compliance Frameworks: Develop, maintain, and continuously enhance frameworks, processes, and procedures aligned with evolving standards and regulations (PIPEDA, COPPA, GDPR).
Strengthen Software Security: Lead and support software updates to improve security controls and maintain regulatory compliance.
Lead Audits and Assessments: Coordinate third-party audits and conduct internal assessments, including SOC 2 and PCI DSS.
Manage Security Incidents: Oversee incident response, including investigation, reporting, communication, and remediation.
Report and Communicate: Prepare and present clear compliance reports and documentation for internal and external stakeholders.
Deliver Training and Awareness: Promote a strong culture of data security through training and team enablement.
Lead and Develop the Team: Mentor team members, support their growth, and build accountability within the function.
Engage with Clients and Vendors: Act as a key point of contact to meet security and compliance requirements.